$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd6b4bfe-55a1-32f9-9dc5-1651a8467e12.roa File: dd6b4bfe-55a1-32f9-9dc5-1651a8467e12.roa (raw, json) Hash identifier: IoQvkDUWAWoRIFtHKJRs8FyitmdS1qUodBfmsYbt1/8= Subject key identifier: BC:CD:72:17:83:9B:15:5E:B2:04:E2:1A:10:3D:24:BB:78:D2:C7:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DD2B54610916CFCA81CC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd6b4bfe-55a1-32f9-9dc5-1651a8467e12.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 162.39.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dd:2b:54:61:09:16:cf:ca:81:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=a26a4a37-3b23-4446-8a50-cbcb52d209fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:e0:52:59:78:84:37:ea:8e:bb:90:22:3a: 65:8a:5e:7a:7f:db:83:6a:2f:1a:c3:79:f8:6f:e5: 6c:cd:9c:d0:27:b3:23:89:e7:e6:aa:14:70:0b:8c: d4:c5:27:79:4b:b7:ed:26:8d:08:48:3b:f0:12:34: 80:d9:66:64:93:a9:fb:13:84:f7:e2:be:58:63:86: d1:01:05:3b:61:f0:29:1d:04:b6:ab:bc:c2:0d:44: 9d:2e:1a:21:5a:1c:b0:3e:55:f3:51:b7:6a:11:17: 69:11:ea:5d:f0:a2:2f:9c:2a:e6:a7:ef:e5:80:c5: 89:4e:bb:2b:e6:97:cf:5e:a3:57:dd:9d:eb:41:b4: 26:e5:a2:d6:ab:49:26:25:3e:5b:8b:5f:05:25:d2: 8a:a7:8f:42:f8:8e:6b:73:a9:63:75:b9:3a:88:a5: d2:1e:ae:2b:8f:e5:55:e9:a4:1a:d2:2c:2f:08:d4: 79:20:67:ea:a9:ee:0c:ea:42:2b:4a:2c:85:19:25: 80:1e:ae:b0:35:56:eb:f1:6c:5c:c1:d3:ad:a2:3a: 25:3b:67:c8:ad:14:90:b4:e3:ae:41:b4:6b:3c:8a: e0:c6:56:08:eb:ab:bd:1e:ee:7a:d8:3b:7d:c5:e3: f5:98:44:77:39:9b:4b:18:b7:ff:90:7b:7f:1e:11: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:72:17:83:9B:15:5E:B2:04:E2:1A:10:3D:24:BB:78:D2:C7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd6b4bfe-55a1-32f9-9dc5-1651a8467e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:61:2b:84:4d:8f:36:df:fc:9d:5b:f2:05:e5:f6:6c:49:fe: 43:43:a9:55:a3:50:cf:55:67:90:b6:65:a5:f1:65:45:f9:4b: c7:b1:70:dc:ba:86:d9:f1:37:dc:73:d5:37:6a:0d:ef:51:9f: a0:72:c5:c9:26:b2:1c:6b:cf:14:09:07:04:25:50:10:fa:fe: 08:78:a5:98:68:a5:04:71:88:15:b2:41:cf:e6:9b:f5:a7:5b: 19:0e:e1:0f:79:ab:9a:e5:a1:d9:ca:78:7d:39:72:e3:00:31: cb:90:bb:47:c9:fc:75:f8:38:35:73:de:96:1c:16:1e:3b:e2: 2b:9f:18:b0:18:99:4b:9c:19:6d:00:be:54:72:92:23:fe:95: 53:75:ab:dd:f0:5e:7f:20:d6:f8:8c:b9:f7:ca:be:69:07:b0: e7:fe:66:e3:7e:3e:da:50:4c:a2:cc:aa:48:3e:e4:d5:90:02: 95:19:a2:77:fe:54:f3:a7:c5:78:d8:de:00:ed:ec:d0:10:ce: ce:28:9a:28:ac:09:e1:41:56:68:dc:10:19:06:2a:80:03:9b: 45:58:4e:be:ad:ab:18:99:e2:35:d7:44:05:02:12:a6:b8:b8: 9d:97:ac:65:07:98:33:ac:fd:88:33:b3:96:6f:84:b5:d9:6f: 29:6d:64:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcN0rVGEJFs/KgcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YTI2YTRhMzctM2IyMy00NDQ2LThhNTAtY2JjYjUyZDIwOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsungUll4hDfqjruQIjplil56f9uDai8aw3n4 b+VszZzQJ7MjiefmqhRwC4zUxSd5S7ftJo0ISDvwEjSA2WZkk6n7E4T34r5YY4bR AQU7YfApHQS2q7zCDUSdLhohWhywPlXzUbdqERdpEepd8KIvnCrmp+/lgMWJTrsr 5pfPXqNX3Z3rQbQm5aLWq0kmJT5bi18FJdKKp49C+I5rc6ljdbk6iKXSHq4rj+VV 6aQa0iwvCNR5IGfqqe4M6kIrSiyFGSWAHq6wNVbr8WxcwdOtojolO2fIrRSQtOOu QbRrPIrgxlYI66u9Hu562Dt9xeP1mER3OZtLGLf/kHt/HhHUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzNcheDmxVesgTiGhA9JLt40sclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGQ2YjRiZmUtNTVhMS0z MmY5LTlkYzUtMTY1MWE4NDY3ZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoie4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJhK4RNjzbf/J1b8gXl9mxJ/kNDqVWjUM9VZ5C2ZaXxZUX5S8excNy6 htnxN9xz1TdqDe9Rn6ByxckmshxrzxQJBwQlUBD6/gh4pZhopQRxiBWyQc/mm/Wn WxkO4Q95q5rlodnKeH05cuMAMcuQu0fJ/HX4ODVz3pYcFh474iufGLAYmUucGW0A vlRykiP+lVN1q93wXn8g1viMuffKvmkHsOf+ZuN+PtpQTKLMqkg+5NWQApUZonf+ VPOnxXjY3gDt7NAQzs4omiisCeFBVmjcEBkGKoADm0VYTr6tqxiZ4jXXRAUCEqa4 uJ2XrGUHmDOs/Ygzs5ZvhLXZbyltZDc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:21 2025 by rpki-client